Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/34352e3137372e3134342e302f32322d3235203d3e20323634373332.roa
File:                     34352e3137372e3134342e302f32322d3235203d3e20323634373332.roa (raw, json)
Hash identifier:          EzFft+nw81acJ9ClTg3FeeIAOXZw1fg/bHFnOie2Fb0=
Subject key identifier:   E2:2E:31:E5:9A:57:56:29:AB:1B:66:F8:85:D5:F1:46:D9:84:3F:60
Certificate issuer:       /CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
Certificate serial:       36F9261767D782ACD30F034FF2F18FDE6A25F3B5
Authority key identifier: 1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/34352e3137372e3134342e302f32322d3235203d3e20323634373332.roa
Signing time:             Tue 05 Mar 2024 17:41:07 +0000
ROA not before:           Tue 05 Mar 2024 17:36:07 +0000
ROA not after:            Tue 04 Mar 2025 17:41:07 +0000
asID:                     264732
IP address blocks:        45.177.144.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl
                          rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 01:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f9:26:17:67:d7:82:ac:d3:0f:03:4f:f2:f1:8f:de:6a:25:f3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
        Validity
            Not Before: Mar  5 17:36:07 2024 GMT
            Not After : Mar  4 17:41:07 2025 GMT
        Subject: CN=E22E31E59A575629AB1B66F885D5F146D9843F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:db:a0:79:51:d0:7f:0f:08:b0:4b:ba:be:
                    32:0b:c5:1f:b5:49:a3:1f:c3:bd:bb:72:7c:46:ae:
                    58:ac:85:f0:ea:11:e1:1b:91:13:76:74:ec:48:10:
                    3d:ca:32:28:a0:97:7d:fb:54:79:33:60:5b:3e:fc:
                    78:12:6f:7f:c8:d0:a4:e9:5d:a9:b3:f3:cd:bc:1c:
                    33:0c:30:a5:2c:dc:8e:94:aa:24:6f:f2:ad:1c:ca:
                    0e:87:ef:45:11:10:a1:1f:3d:34:9a:f4:74:92:eb:
                    34:fc:5b:d5:9e:d1:12:d7:38:5e:2f:f2:e4:f7:d9:
                    4e:a3:28:43:9b:2e:28:c8:b6:aa:2b:1e:f2:6d:7b:
                    fb:6e:34:a2:de:f0:a3:d6:dd:19:82:3b:98:d0:4e:
                    df:48:34:49:cf:77:bf:5a:03:3a:ef:63:74:a2:ad:
                    07:3f:a3:97:c9:29:7f:75:21:e3:92:3c:da:e7:96:
                    e7:3f:4e:02:f6:62:8e:db:3d:da:d6:b2:8c:5d:e7:
                    05:1a:b7:76:8f:04:be:39:2f:5d:ea:ae:7a:93:94:
                    4f:3d:c5:65:0f:7d:71:7b:6a:4a:5f:4a:bf:d2:e6:
                    f2:b6:c4:9a:0f:2e:e2:a4:98:4a:b5:0a:3c:a7:d3:
                    f0:26:2b:ff:84:8f:fd:de:c7:a3:48:0e:08:c5:7e:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2E:31:E5:9A:57:56:29:AB:1B:66:F8:85:D5:F1:46:D9:84:3F:60
            X509v3 Authority Key Identifier:
                keyid:1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/34352e3137372e3134342e302f32322d3235203d3e20323634373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:d8:15:eb:89:46:91:a5:75:a4:d4:c5:74:58:b2:20:9f:
         b9:7b:58:49:09:c5:fc:ed:f5:21:6f:b1:dc:3a:43:6b:d3:29:
         1b:a0:9e:30:34:9a:18:4f:8a:72:47:4e:67:77:9d:db:54:e3:
         63:85:4d:b1:17:7c:71:75:65:cf:75:58:85:bc:d5:5c:73:53:
         1e:3b:2f:69:87:91:38:34:43:89:33:c3:bc:b1:73:80:a7:9a:
         91:09:0b:91:35:14:da:17:ae:5a:52:9f:4d:c6:47:19:c2:61:
         3f:95:06:fc:42:c0:24:ea:93:b5:1f:80:6c:55:a9:b0:85:80:
         ae:c6:56:70:ad:d2:f7:91:2d:44:a6:b9:0c:9f:3f:38:4e:60:
         23:29:d0:60:f6:10:09:64:09:79:4e:59:ab:f1:24:25:51:2d:
         f9:eb:aa:f5:66:18:1b:01:fe:5f:cf:30:aa:c1:dd:c6:15:50:
         3a:3b:2f:47:2c:7f:80:00:ac:6d:7e:06:16:04:fa:68:81:33:
         d3:7d:75:44:90:00:f6:e6:0f:39:d2:8a:37:2c:40:98:ae:00:
         15:30:91:a0:af:be:97:cd:b0:ea:19:24:bc:af:a7:72:c6:ca:
         32:96:ec:e6:45:a0:d9:ec:6e:eb:52:bd:a0:6e:ce:75:8e:18:
         ab:ca:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:14:52 2024 by rpki-client on console-fra.rpki-client.org